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(54) Key distribution for mobile network 

(57) A satellite mobile telecommunications system 
includes mobile terminals 2a, 2b which can communi- 
cate with one another using end-to end encryption and 
decryption techniques. When secure end-to-end com- 
munication is required, each terminal uses a common 
encryption code (RAND) to encode data and decode 
data transmitted between the terminals. The encryption 
code is transmitted in a secure manner from a remote 
database station (15) to the terminals. Each terminal 
stores a terminal key (Kg, Kb) on its SIM card and the 
keys are also held in the remote station (15). Partial 
keys (Kpa, K^) comprising the pseudo random number 
(RAND) and the keys K^, K^, stored at the station (15) 



are produced at the station (15) by an exclusive OR 
process in order to mask the keys and the random 
number The partial key Kp^ = + (RAND) is sent to 
terminal 2a. At the terminal 2a, the partial key Kpa is 
exclusive OR-ed with the locally stored terminal key Kg 
on the SIM card, so as to recover (RAND). The common 
code (RAND) is determined by the same process at ter- 
minal 2b, from Kpt, = Ki,+(RAND) and the locally 
stored key Kb. The terminals then both run a GSM 
encryption algorithm (A5) to encrypt and decrypt trans- 
mitted data, on the basis of the common code (RAND). 
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